{"id":"CVE-2020-12339","aliases":["EUVD-2020-4651","GHSA-4m3m-xxqp-r6w5"],"status":"published","title":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC...","description":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01089,"percentile":0.65824,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-02-17T13:56:35Z","modified":"2026-06-17T02:51:39Z","products":[{"vendor":"intel","product":"collaboration_suite"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00425.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12339"},{"url":"https://github.com/advisories/GHSA-4m3m-xxqp-r6w5"}],"sources":{"cve":[{"id":"CVE-2020-12339","description":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2021-02-17T13:56:35Z","modified":"2024-08-04T11:56:51.795Z","updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-4651","description":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2021-02-17T13:56:35Z","modified":"2024-08-04T11:56:51Z","updated_at":"2026-11-03T03:07:40.388635Z"}],"ghsa":[{"id":"GHSA-4m3m-xxqp-r6w5","title":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC...","description":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2022-05-24T17:42:24Z","modified":"2023-01-29T05:05:27Z","updated_at":"2026-11-02T14:45:47.837276Z"}],"nvd":[{"id":"CVE-2020-12339","description":"Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticated user to potentially enable escalation of privilege via network access.","status":"published","published":"2021-02-17T14:15:15.03Z","modified":"2026-06-17T02:51:39.943Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:34.188486Z"}]}}